RHEL 9 : NetworkManager (RHSA-2026:61244)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61244 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when...

Linux Distros Unpatched Vulnerability : CVE-2026-47888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring...

RHEL 8 : NetworkManager (RHSA-2026:61572)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61572 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when...

RHEL 8 : NetworkManager (RHSA-2026:61580)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61580 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when...

MiracleLinux 9 : NetworkManager-1.54.3-5.el9_8.ML.1 (AXSA:2026-1704:07)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1704:07 advisory. NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend CVE-2026-10805 Tenable has extracted the preceding...

RHEL 9 : libreswan (RHSA-2026:61779)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:61779 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide...

CVE-2024-53027-WIP

CVE-2024-53027-WIP Работа в процессе над PoC CVE-2024-53027: Уязвимость Qualcomm Bluetooth/Wi-Fi 📄 Обзор CVE-2024-53027 — это уязвимость средней степени серьёзности CVSS не оценён, затрагивающая чипсеты WLAN и Bluetooth компании Qualcomm в устройствах на Android. Она может вызывать кратковременны...

OESA-2026-3492 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

SUSE CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

Unity Linux 20.1070e Security Update: texlive-base (UTSA-2026-104941)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104941 advisory. The SyncTeX parser synctexparser.c shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that...

Linux Distros Unpatched Vulnerability : CVE-2026-33605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode...

CVE-2026-55484 ALOS HTTP: Unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

SUSE CVE-2026-80586

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but leaving some...

CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

AZL-98259 CVE-2026-33605 affecting package dovecot 2.3.20-1

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

EUVD-2026-67587

SvelteKit @sveltejs/kit versions =2.49.0 and =2.52.1 with experimental remote functions and form enabled contain a CPU exhaustion vulnerability in form deserialization. An attacker can send malformed form data to cause the server to become unresponsive while processing the request, resulting in...

CVE-2026-82261

SvelteKit (@sveltejs/kit) versions >=2.49.0 and

CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

CVE-2026-33605

CVE-2026-33605 affects the Open-Xchange (OX) ManageSieve service. An unauthenticated attacker can crash the managesieve-login process by sending a small malformed command before authenticating. The blast radius depends on the operating mode: in high-security mode (default for community releases),...

CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...